Innomerc Learn
English is the default.
Everyday Security

Who Can Open Your Shared Link?

Choose the intended readers and the least access they need before sharing a document.

No experience needed6 min explorationReviewed
My learningNot started

One useful thing to do today

Check the recipients, general access and viewing or editing role before sending the link.

More everyday safety lessons

Choose your depth. Learn at your own pace.

Simple explanation

Understand it

You want one colleague to read a draft. A restricted invitation can give that person access. An “anyone with the link” setting may allow a forwarded link to reach readers you never chose. Check the access setting, not just the address in the message.

Viewing and editing are different permissions. Give viewing access when the person only needs to read. Use a made-up document to practise checking the recipient and removing access afterward.

Technical explanation

Under the hood

Sharing combines an identity or audience with a role. Permissions may also come from a parent folder, group or organization policy. Removing one direct invitation may leave another route to access. Read-only access does not prevent all copying, including screenshots.

Practitioner explanation

Practitioner perspective

Assign owners to shared resources and review external access over time. Validate effective permissions, including inherited grants, with an authorized test identity. Classify information before choosing sharing settings and do not put sensitive originals into public demonstrations.

See the decision happen

Watch it work

A fictional, simplified model. Select a component to inspect it, or follow the steps in order.

Interactive Lab

A link is a route. Permission opens the file.

Example: Mira shares a fictional meeting agenda. Compare a public link with a named invitation.

Steps1. Broad access 2. Forwarded link 3. File returned
Click a box or choose its name to learn what it means.
MiraReadyShared fileReadyNew readerReadyMiraReadyShared fileReadyNew readerReady
Ready to traceAnyone with the link
Before you start · 3 stepsAnyone with the link

The link can travel beyond the first person who receives it.

How to use this example

Select Next step to read at your own pace, or Animate step to watch one exchange. Nothing advances until you choose.

Inspect components & read every step
  • Mira

    The fictional owner sharing a file in this example.

    Example: Mira decides who may read the meeting agenda.

  • Shared file

    A document whose access is controlled by sharing settings.

    Example: An agenda may be restricted to named readers or available to anyone with its link.

  • New reader

    Someone attempting to open a shared document.

    Example: Receiving a forwarded link does not automatically grant access to a restricted file.

Anyone with the link

The link can travel beyond the first person who receives it.

  1. Mira Shared file: Broad access. Mira allows anyone holding the link to read the agenda.
  2. New reader Shared file: Forwarded link. Another person opens a forwarded copy of the link.
  3. Shared file New reader: File returned. The broad permission allows this reader to receive the file.

Named readers only

Forwarding a link does not add a person to a restricted access list.

  1. Mira Shared file: Named invitation. Mira grants viewing access only to her intended reviewer.
  2. New reader Shared file: Forwarded link. A different person requests the same restricted file.
  3. Shared file New reader: Access denied. The service checks identity and does not send the file.

Fictional teaching trace. One moving dot represents an exchange, not a measured network capture.

Open the detailed lesson walkthrough

Explore the system

Draft ready

A private draft needs one reviewer.

1 / 3
Read every step without animation

Broad link

  1. Draft ready. A private draft needs one reviewer.
  2. Anyone link. General access allows anyone holding the link.
  3. Link forwarded. People outside the intended group can open it.

Delivery and access settings are separate choices.

Restricted readers

  1. Choose people. Invite the intended reviewer.
  2. View only. Grant reading access for a review task.
  3. Review access. Remove the invitation after it is no longer needed.

Grant only the access the task needs.

What could go wrong

A draft staff list is shared with an unrestricted link that is forwarded beyond the intended team.

What you can do

  • Check the recipients, general access and viewing or editing role before sending the link.
  • Review inherited access and remove access that is no longer needed.

Common mistakes

  • A difficult-to-guess link is not the same as an identity check.
  • Removing access does not erase copies already downloaded.

Check your understanding

What should you check before sharing a private draft?
Active recall: explain this idea in 30 seconds

You want one colleague to read a draft. A restricted invitation can give that person access. An “anyone with the link” setting may allow a forwarded link to reach readers you never chose. Check the access setting, not just the address in the message.

Now give an example and name one limitation. Revisit the explanation if you get stuck.

Primary sources

Original explanations informed by these specifications and official resources. Source versions and lesson review are separate from product updates.

Content reviewed 2026-09-10. Read the editorial policy.

What comes next?

Safer devices and everyday privacy

Back to topic